Package pl.edu.icm.unity.unicore.samlidp.saml

Class AuthnWithETDResponseProcessor

java.lang.Object

pl.edu.icm.unity.saml.idp.processor.StatusResponseProcessor<T,C>

pl.edu.icm.unity.saml.idp.processor.BaseResponseProcessor<xmlbeans.org.oasis.saml2.protocol.AuthnRequestDocument,xmlbeans.org.oasis.saml2.protocol.AuthnRequestType>

pl.edu.icm.unity.saml.idp.processor.AuthnResponseProcessor

pl.edu.icm.unity.unicore.samlidp.saml.AuthnWithETDResponseProcessor

public class AuthnWithETDResponseProcessor
extends pl.edu.icm.unity.saml.idp.processor.AuthnResponseProcessor

Extension of the AuthnResponseProcessor which allows for adding a bootstrap ETD assertion to the response.

Author:

K. Benedyczak

Field Summary

Fields inherited from class pl.edu.icm.unity.saml.idp.processor.StatusResponseProcessor

context, samlConfiguration

Constructor Summary

Constructors

Constructor	Description
AuthnWithETDResponseProcessor(pl.edu.icm.unity.engine.api.attributes.AttributeTypeSupport aTypeSupport, io.imunity.idp.LastIdPClinetAccessAttributeManagement lastAccessAttributeManagement, pl.edu.icm.unity.saml.idp.ctx.SAMLAuthnContext context)
AuthnWithETDResponseProcessor(pl.edu.icm.unity.engine.api.attributes.AttributeTypeSupport aTypeSupport, io.imunity.idp.LastIdPClinetAccessAttributeManagement lastAccessAttributeManagement, pl.edu.icm.unity.saml.idp.ctx.SAMLAuthnContext context, Calendar authnTime)

Method Summary

Modifier and Type	Method	Description
protected boolean	checkX500Issuer(xmlbeans.org.oasis.saml2.assertion.NameIDType issuer)
protected eu.unicore.security.etd.TrustDelegation	generateTD(String custodian, eu.unicore.security.etd.DelegationRestrictions restrictions)
pl.edu.icm.unity.saml.slo.SamlRoutableSignableMessage<xmlbeans.org.oasis.saml2.protocol.ResponseDocument>	processAuthnRequest(pl.edu.icm.unity.types.basic.IdentityParam authenticatedIdentity, Collection<pl.edu.icm.unity.types.basic.Attribute> attributes, String destination, eu.unicore.security.etd.DelegationRestrictions restrictions, String relayState)

Methods inherited from class pl.edu.icm.unity.saml.idp.processor.AuthnResponseProcessor

convertIdentity, createAuthenticationAssertion, establishSubject, getAuthenticatedSubject, getCompatibleIdentities, getRequestedFormat, getSessionId, isIdentityCreationAllowed, processAuthnRequest, processAuthnRequestReturningResponse, setBearerSubjectConfirmation, setupAuthnContext

Methods inherited from class pl.edu.icm.unity.saml.idp.processor.BaseResponseProcessor

addAssertionEncrypting, addAttributesToAssertion, cloneSubject, createAttributeAssertion, filterRequested, getAttributes, getAuthnTime, getChosenGroup, getErrorResponse, getErrorResponse, getErrorResponse, getIdentityTarget, getOKResponseDocument, getRequestIssuer, setSenderVouchesSubjectConfirmation, signAssertion, signResponse

Methods inherited from class pl.edu.icm.unity.saml.idp.processor.StatusResponseProcessor

convert2SAMLError, doSignResponse, getContext, getResponseIssuer, getSamlConfiguration

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthnWithETDResponseProcessor

public AuthnWithETDResponseProcessor(pl.edu.icm.unity.engine.api.attributes.AttributeTypeSupport aTypeSupport,
                                     io.imunity.idp.LastIdPClinetAccessAttributeManagement lastAccessAttributeManagement,
                                     pl.edu.icm.unity.saml.idp.ctx.SAMLAuthnContext context)

AuthnWithETDResponseProcessor

public AuthnWithETDResponseProcessor(pl.edu.icm.unity.engine.api.attributes.AttributeTypeSupport aTypeSupport,
                                     io.imunity.idp.LastIdPClinetAccessAttributeManagement lastAccessAttributeManagement,
                                     pl.edu.icm.unity.saml.idp.ctx.SAMLAuthnContext context,
                                     Calendar authnTime)

Method Detail

processAuthnRequest

public pl.edu.icm.unity.saml.slo.SamlRoutableSignableMessage<xmlbeans.org.oasis.saml2.protocol.ResponseDocument> processAuthnRequest(pl.edu.icm.unity.types.basic.IdentityParam authenticatedIdentity,
                                                                                                                                     Collection<pl.edu.icm.unity.types.basic.Attribute> attributes,
                                                                                                                                     String destination,
                                                                                                                                     eu.unicore.security.etd.DelegationRestrictions restrictions,
                                                                                                                                     String relayState)
                                                                                                                              throws eu.unicore.samly2.exceptions.SAMLRequesterException,
                                                                                                                                     pl.edu.icm.unity.saml.SAMLProcessingException

Throws:

eu.unicore.samly2.exceptions.SAMLRequesterException

pl.edu.icm.unity.saml.SAMLProcessingException

generateTD

protected eu.unicore.security.etd.TrustDelegation generateTD(String custodian,
                                                             eu.unicore.security.etd.DelegationRestrictions restrictions)
                                                      throws pl.edu.icm.unity.saml.SAMLProcessingException

Throws:

pl.edu.icm.unity.saml.SAMLProcessingException

checkX500Issuer

protected boolean checkX500Issuer(xmlbeans.org.oasis.saml2.assertion.NameIDType issuer)